2020

Uncontrolled search path element in the installer for Intel(R) SNMP Subagent Stand-Alone for Windows* may allow an authe

Improper access control in the installer for Intel(R) Chipset Device Software INF Utility before version 10.1.18 may all

Geutebruck IP Cameras G-Code(EEC-2xxx), G-Cam(EBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx): All versions 1.12.0.25 and prior m

Feldtech easescreen Crystal 9.0 Web-Services 9.0.1.16265 allows Stored XSS via the Debug-Log and Display-Log components.

openQA before commit c172e8883d8f32fced5e02f9b6faaacc913df27b was vulnerable to XSS in the distri and version parameter.

In Gallagher Command Centre Server v8.10 prior to v8.10.1134(MR4), v8.00 prior to v8.00.1161(MR5), v7.90 prior to v7.90.

In Gallagher Command Centre Server versions of v8.10 prior to v8.10.1134(MR4), v8.00 prior to v8.00.1161(MR5), v7.90 pri

tcp_emu in tcp_subr.c in libslirp 4.1.0, as used in QEMU 4.2.0, mismanages memory, as demonstrated by IRC DCC commands i

Authentication bypass using an alternate path or channel in SimpliSafe SS3 firmware 1.0-1.3 allows a local, unauthentica

HPE Superdome Flex Server is vulnerable to multiple remote vulnerabilities via improper input validation of administrato

A potential security vulnerability has been identified in HPE enhanced Internet Usage Manager (eIUM) versions 8.3 and 9.

By default, Apache CXF creates a /services page containing a listing of the available endpoint names and addresses. This

A vulnerability has been identified in SINAMICS PERFECT HARMONY GH180 Drives MLFB 6SR32..-.....-.... MLFB 6SR4...-.....-

The flow_dissector feature in the Linux kernel 4.3 through 5.x before 5.3.10 has a device tracking vulnerability, aka CI

The LearnDash LMS plugin before 3.1.2 for WordPress allows XSS via the ld-profile search field.

The Ultimate FAQ plugin before 1.8.30 for WordPress allows XSS via Display_FAQ to Shortcodes/DisplayFAQs.php.

Cacti 1.2.8 has stored XSS in data_sources.php, color_templates_item.php, graphs.php, graph_items.php, lib/api_automatio

In Wireshark 3.0.x before 3.0.8, the BT ATT dissector could crash. This was addressed in epan/dissectors/packet-btatt.c

An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0. The Add Collaborator allows

An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0. admin/add_user/UID allows s

An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0. An admin can change their p

An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0. The User Type on the admin/

An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0. admin/list_user allows stor

python-markdown2 before 1.0.1.14 has multiple cross-site scripting (XSS) issues.

OSIsoft PI Vision, All versions of PI Vision prior to 2019. The affected product is vulnerable to an improper access con

OSIsoft PI Vision, PI Vision 2017 R2 and PI Vision 2017 R2 SP1. The affected product is vulnerable to cross-site scripti

In OSIsoft PI System multiple products and versions, a local attacker could view sensitive information in log files when

Directory traversal vulnerability in application/templates/amelia/loadjs.php in Free Reprintables ArticleFR 3.0.7 and ea

The BIRT Engine servlet in the AR System Mid Tier component before 9.0 SP1 for BMC Remedy AR System Server allows remote

AR System Mid Tier in the AR System Mid Tier component before 9.0 SP1 for BMC Remedy AR System Server allows remote auth

Vulnerability in the Oracle Financial Services Revenue Management and Billing product of Oracle Financial Services Appli

Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: Advanced Console). Supported versi

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that ar

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that ar

Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: In

Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: In

Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: In

Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: In

Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Core

Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Core

Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Core

Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Core

Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Core). Suppor

Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Core). Suppor

Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Core). Suppor

Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Core). Suppor

Vulnerability in the Oracle iLearning product of Oracle iLearning (component: Learner Pages). The supported version that

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that ar

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that ar